$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: TDwdA+JnQxXR0Bytaml8DbJWJMQ0Zzx+bj7NwkipoQY= Subject key identifier: 29:97:C2:79:9D:08:1C:98:77:5A:F2:A7:4A:54:4A:4E:E6:F7:EF:E2 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584E07008F95E2FAC1A992B32720 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:8f:95:e2:fa:c1:a9:92:b3:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=192c6c83-f08e-42c3-8771-77254b23f47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:17:10:91:e0:dc:ca:45:73:80:92:9d:46: 0a:14:e4:be:b5:f7:6c:db:71:dc:52:65:91:00:81: 9b:ea:ee:f0:bd:f0:92:9e:59:52:c7:96:4f:54:45: a9:81:dc:e7:ef:9b:0c:44:8c:ee:67:8e:db:4b:af: 06:ff:82:a4:e4:ae:3d:a4:59:2c:49:6f:29:ab:49: e7:ac:45:8c:6b:ba:76:67:16:d7:2b:1e:7f:e0:60: ba:c5:f4:0b:0a:77:1c:fb:3f:40:8b:9b:a9:63:d6: 18:b2:72:38:0d:32:bd:09:d7:ac:1e:7a:12:15:0f: d9:03:46:bd:95:b8:57:0b:20:05:14:61:d5:cb:bf: 07:32:f1:18:44:cc:ad:5a:cd:6b:97:2a:0a:b3:e7: c5:ae:e0:91:ff:e8:bf:1c:dc:19:11:5f:1f:cd:1d: 5e:ce:5b:6f:46:46:32:ba:d4:c3:88:64:4c:60:96: 15:ca:51:08:93:0d:1f:2f:28:cd:55:07:67:4c:42: 0a:35:18:a5:24:a0:85:b0:e1:99:9b:24:69:66:e3: 41:46:88:82:57:35:f8:05:6d:45:56:18:68:04:ef: a9:61:57:97:8d:e8:3a:9f:58:e0:be:72:a1:a0:40: 1e:27:60:91:60:8d:79:72:e3:b9:a5:04:b7:fb:89: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:C2:79:9D:08:1C:98:77:5A:F2:A7:4A:54:4A:4E:E6:F7:EF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a5:ed:27:02:28:4d:5b:5f:05:08:d3:e1:b3:e3:91:d0:e9: 28:09:74:09:e7:d4:f9:78:a5:5e:37:31:c3:33:c0:72:2b:3a: ab:b4:dd:9f:31:a8:20:f1:da:80:c5:a8:90:24:18:16:ed:22: 9f:4d:35:0d:7e:ec:d8:5f:eb:a7:38:ec:cc:f6:38:5e:28:91: cc:1c:a0:3c:a8:89:54:35:90:2d:4a:f4:82:da:25:9d:f8:ea: 9d:40:5b:c0:0c:46:16:2b:ee:41:c8:1e:ec:dd:2a:1c:0c:67: fa:8a:ee:b2:47:a3:e4:12:8c:e1:f1:e1:0c:bb:3d:bb:62:82: be:71:98:06:83:4b:38:1d:ee:4e:a0:30:78:76:3b:40:78:2a: 91:7d:d0:78:b9:ae:70:88:4a:4a:61:d7:e7:71:35:c5:8a:81: e2:ce:53:b8:c8:d4:dd:f6:93:5d:f7:58:ba:af:74:a5:94:ea: 5d:79:41:b8:68:b5:07:17:a8:74:eb:8b:32:66:f0:35:e2:30: f7:9e:a1:6b:65:54:37:06:1c:66:db:9b:fa:10:21:c1:45:da: d7:e0:d3:cd:40:2b:1f:14:03:e4:19:fe:ce:c9:ef:c1:74:6b: c1:38:02:73:4d:75:0b:ac:75:16:de:5a:28:45:f6:08:af:a3: 0c:14:02:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAI+V4vrBqZKzJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MTkyYzZjODMtZjA4ZS00MmMzLTg3NzEtNzcyNTRiMjNmNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH0XEJHg3MpFc4CSnUYKFOS+tfds23HcUmWR AIGb6u7wvfCSnllSx5ZPVEWpgdzn75sMRIzuZ47bS68G/4Kk5K49pFksSW8pq0nn rEWMa7p2ZxbXKx5/4GC6xfQLCncc+z9Ai5upY9YYsnI4DTK9CdesHnoSFQ/ZA0a9 lbhXCyAFFGHVy78HMvEYRMytWs1rlyoKs+fFruCR/+i/HNwZEV8fzR1ezltvRkYy utTDiGRMYJYVylEIkw0fLyjNVQdnTEIKNRilJKCFsOGZmyRpZuNBRoiCVzX4BW1F VhhoBO+pYVeXjeg6n1jgvnKhoEAeJ2CRYI15cuO5pQS3+4nnQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmXwnmdCByYd1ryp0pUSk7m9+/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABql7ScCKE1bXwUI0+Gz45HQ6SgJdAnn1Pl4pV43McMzwHIrOqu03Z8x qCDx2oDFqJAkGBbtIp9NNQ1+7Nhf66c47Mz2OF4okcwcoDyoiVQ1kC1K9ILaJZ34 6p1AW8AMRhYr7kHIHuzdKhwMZ/qK7rJHo+QSjOHx4Qy7Pbtigr5xmAaDSzgd7k6g MHh2O0B4KpF90Hi5rnCISkph1+dxNcWKgeLOU7jI1N32k133WLqvdKWU6l15Qbho tQcXqHTrizJm8DXiMPeeoWtlVDcGHGbbm/oQIcFF2tfg081AKx8UA+QZ/s7J78F0 a8E4AnNNdQusdRbeWihF9givowwUAk8= -----END CERTIFICATE-----Generated at Sat Jun 13 14:24:34 2026 by rpki-client